Privacy Policy

1. Information we collect

Account information. When you create an account, we collect your email address and a display name. If you sign in with Discord or Google, that provider gives us your account's username or display name and email address so we can create and identify your profile — we don't receive your password for those accounts.

Checkout profile information. To run automated checkouts on your behalf, you provide one or more retailer profiles containing a full name, phone number, and shipping address (street, city, state, ZIP), along with which retailer (e.g. Target, Pokémon Center) the profile is used for.

Retailer account access (Target, and Amazon beta). Target and Amazon don't support guest checkout for an automated order, so for a profile at either of those retailers we need your account sign-in there to check out on your behalf — Pokémon Center is the only retailer we support that works with guest checkout, so no account access is needed for that one. We don't collect this through the site — the same as card details (see below), you provide it to us directly off-platform (Discord or email) and it isn't stored in our database. Amazon checkout itself is currently invite-only; we'll always tell you plainly if you're being asked for either retailer's account information.

Payment information. Card details are collected and processed directly by our payment processor, Stripe. Cart Kings does not receive or store your full card number — Stripe returns a payment token that we use to bill your membership and any secured items.

Usage information. We keep records of the items on your want list, your membership plan and billing status, and the status, price, and timing of checkouts run on your behalf.

Communications. If you contact us for support (including via our Discord server) or reply to an email, we keep a record of that conversation.

Technical information. Our hosting and infrastructure providers (see Section 4) automatically log basic technical data such as IP address and browser type as part of operating the Service securely.

2. How we use your information

• To run the checkout automation you've requested — matching your want list against retailer stock and submitting a purchase using the shipping profile and payment method you've provided.
• To create, authenticate, and secure your account, including via email/password or Discord/Google sign-in.
• To bill your membership and any items successfully secured on your behalf.
• To send you account, order, and drop-related communications.
• To provide customer support.
• To maintain, secure, and improve the Service.

3. When we share your information

We do not sell your personal information. We share it only in these situations:

• Retailers. To complete a purchase you've requested, your shipping and payment details are submitted through the applicable retailer's own checkout process, the same as if you'd checked out yourself.
• Service providers. We use third-party infrastructure to run Cart Kings — see Section 4 for the specific providers and what each one handles.
• Legal reasons. If required to comply with a legal obligation, protect our rights, or prevent fraud or abuse of the Service.

4. Third-party service providers

• Supabase — hosts our database and handles account authentication.
• Stripe — processes membership and item payments; handles and stores your card details under its own privacy and security policies.
• Netlify — hosts the cartkingsaco.com website.
• Discord / Google — provide optional sign-in; used only to authenticate you and populate your display name if you choose that sign-in method.

Each of these providers processes data under its own privacy policy in addition to this one.

5. Data retention

We keep your account and checkout profile information for as long as your account is active. If you close your account, we may retain certain records (such as billing history) for as long as needed for legitimate business, tax, or legal purposes.

6. Your choices

You can update or remove your checkout profiles at any time from your dashboard. To update, export, or delete your account data, or to ask us anything about this policy, email cartkingsaco@gmail.com or reach us in our Discord.

7. Cookies and local storage

We use essential browser storage (such as local storage) to keep you signed in between visits. We don't use third-party advertising trackers.

8. Children's privacy

The Service is not directed to, and we do not knowingly collect information from, children under 13. If you believe a child has provided us with personal information, contact us and we'll remove it.

9. Security

We use industry-standard safeguards, including working with providers (Supabase, Stripe) that maintain their own security certifications, to protect your information. No method of transmission or storage is 100% secure, so we can't guarantee absolute security.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you directly.

11. Contact us

Questions about this policy? Email cartkingsaco@gmail.com.